The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9306 advisory.

    - Resolves: RHEL-52724 - Regression introduced by CVE-2024-38474 fix
    - Resolves: RHEL-31856 - httpd: HTTP response splitting       (CVE-2023-38709)
    - Resolves: RHEL-31859 - httpd: HTTP Response Splitting in multiple       modules (CVE-2024-24795)
    - Resolves: RHEL-14447 - httpd: mod_macro: out-of-bounds read       vulnerability (CVE-2023-31122)
    - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with       mod_rewrite and mod_proxy
    - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write       of zero byte
    - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
    - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request       smuggling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 9 : httpd (ELSA-2024-9306)

high Nessus Plugin ID 211533

Version 1.1